1 /*
2  * Marvell Wireless LAN device driver: 802.11h
3  *
4  * Copyright (C) 2013-2014, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19 
20 #include "main.h"
21 #include "fw.h"
22 
23 
24 void mwifiex_init_11h_params(struct mwifiex_private *priv)
25 {
26 	priv->state_11h.is_11h_enabled = true;
27 	priv->state_11h.is_11h_active = false;
28 }
29 
30 inline int mwifiex_is_11h_active(struct mwifiex_private *priv)
31 {
32 	return priv->state_11h.is_11h_active;
33 }
34 /* This function appends 11h info to a buffer while joining an
35  * infrastructure BSS
36  */
37 static void
38 mwifiex_11h_process_infra_join(struct mwifiex_private *priv, u8 **buffer,
39 			       struct mwifiex_bssdescriptor *bss_desc)
40 {
41 	struct mwifiex_ie_types_header *ie_header;
42 	struct mwifiex_ie_types_pwr_capability *cap;
43 	struct mwifiex_ie_types_local_pwr_constraint *constraint;
44 	struct ieee80211_supported_band *sband;
45 	u8 radio_type;
46 	int i;
47 
48 	if (!buffer || !(*buffer))
49 		return;
50 
51 	radio_type = mwifiex_band_to_radio_type((u8) bss_desc->bss_band);
52 	sband = priv->wdev.wiphy->bands[radio_type];
53 
54 	cap = (struct mwifiex_ie_types_pwr_capability *)*buffer;
55 	cap->header.type = cpu_to_le16(WLAN_EID_PWR_CAPABILITY);
56 	cap->header.len = cpu_to_le16(2);
57 	cap->min_pwr = 0;
58 	cap->max_pwr = 0;
59 	*buffer += sizeof(*cap);
60 
61 	constraint = (struct mwifiex_ie_types_local_pwr_constraint *)*buffer;
62 	constraint->header.type = cpu_to_le16(WLAN_EID_PWR_CONSTRAINT);
63 	constraint->header.len = cpu_to_le16(2);
64 	constraint->chan = bss_desc->channel;
65 	constraint->constraint = bss_desc->local_constraint;
66 	*buffer += sizeof(*constraint);
67 
68 	ie_header = (struct mwifiex_ie_types_header *)*buffer;
69 	ie_header->type = cpu_to_le16(TLV_TYPE_PASSTHROUGH);
70 	ie_header->len  = cpu_to_le16(2 * sband->n_channels + 2);
71 	*buffer += sizeof(*ie_header);
72 	*(*buffer)++ = WLAN_EID_SUPPORTED_CHANNELS;
73 	*(*buffer)++ = 2 * sband->n_channels;
74 	for (i = 0; i < sband->n_channels; i++) {
75 		*(*buffer)++ = ieee80211_frequency_to_channel(
76 					sband->channels[i].center_freq);
77 		*(*buffer)++ = 1; /* one channel in the subband */
78 	}
79 }
80 
81 /* Enable or disable the 11h extensions in the firmware */
82 int mwifiex_11h_activate(struct mwifiex_private *priv, bool flag)
83 {
84 	u32 enable = flag;
85 
86 	/* enable master mode radar detection on AP interface */
87 	if ((GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP) && enable)
88 		enable |= MWIFIEX_MASTER_RADAR_DET_MASK;
89 
90 	return mwifiex_send_cmd(priv, HostCmd_CMD_802_11_SNMP_MIB,
91 				HostCmd_ACT_GEN_SET, DOT11H_I, &enable, true);
92 }
93 
94 /* This functions processes TLV buffer for a pending BSS Join command.
95  *
96  * Activate 11h functionality in the firmware if the spectrum management
97  * capability bit is found in the network we are joining. Also, necessary
98  * TLVs are set based on requested network's 11h capability.
99  */
100 void mwifiex_11h_process_join(struct mwifiex_private *priv, u8 **buffer,
101 			      struct mwifiex_bssdescriptor *bss_desc)
102 {
103 	if (bss_desc->sensed_11h) {
104 		/* Activate 11h functions in firmware, turns on capability
105 		 * bit
106 		 */
107 		mwifiex_11h_activate(priv, true);
108 		priv->state_11h.is_11h_active = true;
109 		bss_desc->cap_info_bitmap |= WLAN_CAPABILITY_SPECTRUM_MGMT;
110 		mwifiex_11h_process_infra_join(priv, buffer, bss_desc);
111 	} else {
112 		/* Deactivate 11h functions in the firmware */
113 		mwifiex_11h_activate(priv, false);
114 		priv->state_11h.is_11h_active = false;
115 		bss_desc->cap_info_bitmap &= ~WLAN_CAPABILITY_SPECTRUM_MGMT;
116 	}
117 }
118 
119 /* This is DFS CAC work queue function.
120  * This delayed work emits CAC finished event for cfg80211 if
121  * CAC was started earlier.
122  */
123 void mwifiex_dfs_cac_work_queue(struct work_struct *work)
124 {
125 	struct cfg80211_chan_def chandef;
126 	struct delayed_work *delayed_work = to_delayed_work(work);
127 	struct mwifiex_private *priv =
128 			container_of(delayed_work, struct mwifiex_private,
129 				     dfs_cac_work);
130 
131 	if (WARN_ON(!priv))
132 		return;
133 
134 	chandef = priv->dfs_chandef;
135 	if (priv->wdev.cac_started) {
136 		mwifiex_dbg(priv->adapter, MSG,
137 			    "CAC timer finished; No radar detected\n");
138 		cfg80211_cac_event(priv->netdev, &chandef,
139 				   NL80211_RADAR_CAC_FINISHED,
140 				   GFP_KERNEL);
141 	}
142 }
143 
144 /* This function prepares channel report request command to FW for
145  * starting radar detection.
146  */
147 int mwifiex_cmd_issue_chan_report_request(struct mwifiex_private *priv,
148 					  struct host_cmd_ds_command *cmd,
149 					  void *data_buf)
150 {
151 	struct host_cmd_ds_chan_rpt_req *cr_req = &cmd->params.chan_rpt_req;
152 	struct mwifiex_radar_params *radar_params = (void *)data_buf;
153 
154 	cmd->command = cpu_to_le16(HostCmd_CMD_CHAN_REPORT_REQUEST);
155 	cmd->size = cpu_to_le16(S_DS_GEN);
156 	le16_add_cpu(&cmd->size, sizeof(struct host_cmd_ds_chan_rpt_req));
157 
158 	cr_req->chan_desc.start_freq = cpu_to_le16(MWIFIEX_A_BAND_START_FREQ);
159 	cr_req->chan_desc.chan_num = radar_params->chandef->chan->hw_value;
160 	cr_req->chan_desc.chan_width = radar_params->chandef->width;
161 	cr_req->msec_dwell_time = cpu_to_le32(radar_params->cac_time_ms);
162 
163 	if (radar_params->cac_time_ms)
164 		mwifiex_dbg(priv->adapter, MSG,
165 			    "11h: issuing DFS Radar check for channel=%d\n",
166 			    radar_params->chandef->chan->hw_value);
167 	else
168 		mwifiex_dbg(priv->adapter, MSG, "cancelling CAC\n");
169 
170 	return 0;
171 }
172 
173 int mwifiex_stop_radar_detection(struct mwifiex_private *priv,
174 				 struct cfg80211_chan_def *chandef)
175 {
176 	struct mwifiex_radar_params radar_params;
177 
178 	memset(&radar_params, 0, sizeof(struct mwifiex_radar_params));
179 	radar_params.chandef = chandef;
180 	radar_params.cac_time_ms = 0;
181 
182 	return mwifiex_send_cmd(priv, HostCmd_CMD_CHAN_REPORT_REQUEST,
183 				HostCmd_ACT_GEN_SET, 0, &radar_params, true);
184 }
185 
186 /* This function is to abort ongoing CAC upon stopping AP operations
187  * or during unload.
188  */
189 void mwifiex_abort_cac(struct mwifiex_private *priv)
190 {
191 	if (priv->wdev.cac_started) {
192 		if (mwifiex_stop_radar_detection(priv, &priv->dfs_chandef))
193 			mwifiex_dbg(priv->adapter, ERROR,
194 				    "failed to stop CAC in FW\n");
195 		mwifiex_dbg(priv->adapter, MSG,
196 			    "Aborting delayed work for CAC.\n");
197 		cancel_delayed_work_sync(&priv->dfs_cac_work);
198 		cfg80211_cac_event(priv->netdev, &priv->dfs_chandef,
199 				   NL80211_RADAR_CAC_ABORTED, GFP_KERNEL);
200 	}
201 }
202 
203 /* This function handles channel report event from FW during CAC period.
204  * If radar is detected during CAC, driver indicates the same to cfg80211
205  * and also cancels ongoing delayed work.
206  */
207 int mwifiex_11h_handle_chanrpt_ready(struct mwifiex_private *priv,
208 				     struct sk_buff *skb)
209 {
210 	struct host_cmd_ds_chan_rpt_event *rpt_event;
211 	struct mwifiex_ie_types_chan_rpt_data *rpt;
212 	u8 *evt_buf;
213 	u16 event_len, tlv_len;
214 
215 	rpt_event = (void *)(skb->data + sizeof(u32));
216 	event_len = skb->len - (sizeof(struct host_cmd_ds_chan_rpt_event)+
217 				sizeof(u32));
218 
219 	if (le32_to_cpu(rpt_event->result) != HostCmd_RESULT_OK) {
220 		mwifiex_dbg(priv->adapter, ERROR,
221 			    "Error in channel report event\n");
222 		return -1;
223 	}
224 
225 	evt_buf = (void *)&rpt_event->tlvbuf;
226 
227 	while (event_len >= sizeof(struct mwifiex_ie_types_header)) {
228 		rpt = (void *)&rpt_event->tlvbuf;
229 		tlv_len = le16_to_cpu(rpt->header.len);
230 
231 		switch (le16_to_cpu(rpt->header.type)) {
232 		case TLV_TYPE_CHANRPT_11H_BASIC:
233 			if (rpt->map.radar) {
234 				mwifiex_dbg(priv->adapter, MSG,
235 					    "RADAR Detected on channel %d!\n",
236 					    priv->dfs_chandef.chan->hw_value);
237 				cancel_delayed_work_sync(&priv->dfs_cac_work);
238 				cfg80211_cac_event(priv->netdev,
239 						   &priv->dfs_chandef,
240 						   NL80211_RADAR_DETECTED,
241 						   GFP_KERNEL);
242 			}
243 			break;
244 		default:
245 			break;
246 		}
247 
248 		evt_buf += (tlv_len + sizeof(rpt->header));
249 		event_len -= (tlv_len + sizeof(rpt->header));
250 	}
251 
252 	return 0;
253 }
254 
255 /* Handler for radar detected event from FW.*/
256 int mwifiex_11h_handle_radar_detected(struct mwifiex_private *priv,
257 				      struct sk_buff *skb)
258 {
259 	struct mwifiex_radar_det_event *rdr_event;
260 
261 	rdr_event = (void *)(skb->data + sizeof(u32));
262 
263 	if (le32_to_cpu(rdr_event->passed)) {
264 		mwifiex_dbg(priv->adapter, MSG,
265 			    "radar detected; indicating kernel\n");
266 		if (mwifiex_stop_radar_detection(priv, &priv->dfs_chandef))
267 			mwifiex_dbg(priv->adapter, ERROR,
268 				    "Failed to stop CAC in FW\n");
269 		cfg80211_radar_event(priv->adapter->wiphy, &priv->dfs_chandef,
270 				     GFP_KERNEL);
271 		mwifiex_dbg(priv->adapter, MSG, "regdomain: %d\n",
272 			    rdr_event->reg_domain);
273 		mwifiex_dbg(priv->adapter, MSG, "radar detection type: %d\n",
274 			    rdr_event->det_type);
275 	} else {
276 		mwifiex_dbg(priv->adapter, MSG,
277 			    "false radar detection event!\n");
278 	}
279 
280 	return 0;
281 }
282 
283 /* This is work queue function for channel switch handling.
284  * This function takes care of updating new channel definitin to
285  * bss config structure, restart AP and indicate channel switch success
286  * to cfg80211.
287  */
288 void mwifiex_dfs_chan_sw_work_queue(struct work_struct *work)
289 {
290 	struct mwifiex_uap_bss_param *bss_cfg;
291 	struct delayed_work *delayed_work = to_delayed_work(work);
292 	struct mwifiex_private *priv =
293 			container_of(delayed_work, struct mwifiex_private,
294 				     dfs_chan_sw_work);
295 
296 	if (WARN_ON(!priv))
297 		return;
298 
299 	bss_cfg = &priv->bss_cfg;
300 	if (!bss_cfg->beacon_period) {
301 		mwifiex_dbg(priv->adapter, ERROR,
302 			    "channel switch: AP already stopped\n");
303 		return;
304 	}
305 
306 	mwifiex_uap_set_channel(priv, bss_cfg, priv->dfs_chandef);
307 
308 	if (mwifiex_config_start_uap(priv, bss_cfg)) {
309 		mwifiex_dbg(priv->adapter, ERROR,
310 			    "Failed to start AP after channel switch\n");
311 		return;
312 	}
313 
314 	mwifiex_dbg(priv->adapter, MSG,
315 		    "indicating channel switch completion to kernel\n");
316 	cfg80211_ch_switch_notify(priv->netdev, &priv->dfs_chandef);
317 }
318